Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/17257513-0a31-325d-b71f-a854a1b5e0a5.roa
File:                     17257513-0a31-325d-b71f-a854a1b5e0a5.roa (raw, json)
Hash identifier:          DzLJ6QHdRQoLdC8NZlAeG6kt4RdJ02qYrzUIfjSsOr8=
Subject key identifier:   5E:E7:6D:21:1E:2A:58:32:C1:26:8B:3A:A9:9B:A0:96:B2:A5:19:C5
Certificate issuer:       /CN=2c480684-ece9-4dd6-8ec6-0437d826102d
Certificate serial:       010D0C9F4328584F612D66235D54227E2AAA24C0
Authority key identifier: DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/17257513-0a31-325d-b71f-a854a1b5e0a5.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     46616
IP address blocks:        208.114.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:66:23:5d:54:22:7e:2a:aa:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c480684-ece9-4dd6-8ec6-0437d826102d
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=ac2da5dc-f0b0-45e4-b07f-637579f39903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:86:2e:19:74:09:40:40:1e:3e:ea:32:eb:12:
                    da:1e:3d:f5:f7:e7:9c:48:06:5b:a3:7b:3a:6d:2d:
                    07:85:8f:f2:5e:80:14:fb:fe:c2:dc:ec:24:8c:0c:
                    bb:55:0a:89:f6:b4:4e:8a:46:d9:1e:e1:9a:c0:67:
                    94:85:92:1d:eb:fe:af:5d:68:5f:7a:a7:fe:d8:23:
                    4e:96:b0:ea:72:db:5e:90:41:13:af:72:bd:a0:92:
                    f0:06:e6:2d:3c:2f:8d:0c:8e:10:6f:0b:cb:cc:a9:
                    5e:b8:8d:5c:12:e9:96:a0:4a:54:f4:f6:cb:86:d4:
                    0d:da:a5:d7:c6:53:47:54:01:45:15:ef:cb:31:c3:
                    6c:00:be:76:d5:dd:5a:cf:93:cb:df:1c:57:73:1a:
                    22:10:45:aa:30:71:37:81:91:3d:49:f9:e0:61:13:
                    5c:55:4b:f5:1a:90:74:ad:44:5a:77:8a:d1:8e:6b:
                    63:58:41:b0:19:98:77:ef:74:b2:cb:97:1c:a7:13:
                    d4:6b:3c:88:08:b1:7d:f3:ba:1b:4c:f6:67:1a:d4:
                    9b:f3:9e:d2:53:3c:fa:82:62:3d:fa:00:1e:d8:a3:
                    63:ca:d9:37:69:60:5d:54:66:98:95:b1:0d:82:c8:
                    3e:8d:c3:2b:24:d7:13:8f:63:fb:6a:19:ab:f7:e8:
                    47:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E7:6D:21:1E:2A:58:32:C1:26:8B:3A:A9:9B:A0:96:B2:A5:19:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/17257513-0a31-325d-b71f-a854a1b5e0a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.crl

            X509v3 Authority Key Identifier:
                keyid:DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.114.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:16:cb:41:d0:8a:57:b4:06:1a:bc:99:5b:5d:ce:10:b8:a0:
         92:47:a2:bb:e9:59:47:96:95:b9:31:5f:94:07:8a:c0:65:23:
         4d:13:99:2d:ae:89:26:4d:5a:f0:2d:66:3f:a9:d1:de:63:9d:
         6e:dd:02:49:54:3c:af:1c:da:c0:a4:08:c8:1d:4c:c2:53:18:
         cd:58:19:dd:78:fe:70:09:05:d4:bd:f9:b5:d1:0d:ca:86:bb:
         5c:77:9a:73:4e:cc:ef:4a:b4:b4:61:77:6b:c7:f6:2e:ee:d7:
         6c:1d:50:64:52:b5:e0:00:71:d1:3d:63:65:db:2d:08:a3:6c:
         2e:db:af:4f:1e:cb:45:32:a4:27:af:3a:58:bb:5d:97:08:38:
         23:d1:45:02:f4:5f:08:ff:a3:1c:4e:09:87:77:6e:50:a9:b7:
         f2:4f:70:9c:dd:7b:55:35:17:89:f0:20:b8:47:b1:26:89:ef:
         b7:a9:01:e1:fb:8c:14:e2:99:96:94:a6:dd:1e:bb:ba:a8:56:
         5c:d1:ae:c5:a6:8c:f3:2b:24:bf:c5:2b:1f:8f:9d:96:1c:26:
         34:11:34:94:49:38:b2:51:78:07:e9:b0:91:58:ad:5e:32:12:
         7d:ce:ea:d7:fe:eb:de:20:3b:13:92:dc:07:c4:36:9b:bf:17:
         36:f9:85:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:44:36 2026 by rpki-client